Recursive formulas generating power moments of 

multi-dimensional Kloosterman sums and 
m-multiple power moments of Kloosterman sums 
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Abstract. In this paper, we construct two binary linear codes associated with 
multi-dimensional and m— multiple power Kloosterman sums (for any fixed m) 
over the finite field F^. Here g is a power of two. The former codes are dual 
to a subcode of the binary hyper-Kloosterman code. Then we obtain two 
recursive formulas for the power moments of multi-dimensional Kloosterman 
sums and for the m-multiple power moments of Kloosterman sums in terms 
of the frequencies of weights in the respective codes. This is done via Pless 
power moment identity and yields, in the case of power moments of multi- 
dimensional Kloosterman sums, much simpler recursive formulas than those 
associated with finite special linear groups obtained previously. 

Index terms-recursive formula, multi-dimensional Kloosterman sum, Kloost- 
erman sum, Pless power moment identity, weight distribution. 
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1. Introduction and Notations 

Let ?/) be a nontrivial additive character of the finite field ¥q with q = elements 
{p SL prime), and let m be a positive integer. Then the m-dimensional Kloosterman 
sum Km{4''i a)(|ID]) is defined by 

Kjn{ip;a)= ^ ip{ai-\ h a™ + aa]"^ • • -a^^) (a e F*). 

For this, we have the Deligne bound 

(1.1) |i^™(V';a)| < (m + l)#. 

In particular, if to = 1, then ifi('0; a) is simply denoted by K{ip] a), and is called 
the Kloosterman sum. The Kloosterman sum was introduced in 1926 [8] to give 
an estimate for the Fourier coefficients of modular forms. It has also been studied 
to solve various problems in coding theory and cryptography over finite fields of 
characteristic two. 

For each nonnegative integer /i, by MKm{tp)'^ we will denote the h-th moment 
of the m-dimensional Kloosterman sum Kmiip] o)- Namely, it is given by 
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If ■0 = A is the canonical additive character of F^, then MK^iX)^ will be simply 
denoted by MK^. If futher m = 1, for brevity MK^ will be indicated by MK^. 
The power moments of Kloosterman sums can be used, for example, to give an 
estimate for the Kloosterman sums. 

Explicit computations on power moments of Kloosterman sums were begun with 
the paper [17] of Sahe in 1931, where he showed, for any odd prime g, 

MK'' = q^Mh-i -{q- 1)''"^ + 2{-l f-^ [h > 1). 
Here Mq — 0, and, for h e Z>o, 

h h 

Mn = |{(ai, ■■■,ah)e (F;)''! ^ a. = 1 = J] 

i=i i=i 

For g = p odd prime, Sahe obtained MK^, MK^, MK^, MK'^ in that same 
paper by determining Mi, M2, M3. On the other hand, MK^ can be expressed 
in terms of the p-th eigenvalue for a weight 3 newform on ro(15) (cf. [11], [l6]). 
MK^ can be expressed in terms of the p-th eigenvalue for a weight 4 newform on 
To (6) (cf.[5). Also, based on numerical evidence, in |3] Evans was led to propose 
a conjecture which expresses MK'' in terms of Hecke eigenvalues for a weight 3 
newform on ro(525) with quartic nebentypus of conductor 105. 

From now on, let us assume that q = T'. Carlitz [I] evaluated MA''' for h < A. 
Recently, Moisio was able to find explicit expressions of MK^, for h < 10 (cf. 
[13|). This was done, via Pless power moment identity, by connecting moments of 
Kloosterman sums and the frequencies of weights in the binary Zetterberg code of 
length q + 1, which were known by the work of Schoof and Vlugt in [T8] . 

Also, Moisio considered binary hyper-Kloosterman codes C(r, to) and deter- 
mined the weight distributions of C(r, m) and C-^lr, m), for r — 2 and all to > 2, 
and for all r > 2 and to = 3 (cf. IMj)- In [ISj, these results were further extended 
to the case of r = 3, 4 and all to > 2. 

In this paper, along the line of |5] we construct two binary linear codes C„_i and 
Dm, respectively connected with multi-dimensional and to- multiple power Kloost- 
erman sums (for any fixed to) over the finite field F^. Here q is a power of two. 
The code C^_i is a subcode of the hyper-Kloosterman code C{r,n), which is men- 
tioned above. Then we obtain two recursive formulas for the power moments of 
multi-dimensional Kloosterman sums and the TO-multiple power moments of Kloost- 
erman sums in terms of the frequencies of weights in the respective codes. This is 
done via Pless power moment identity and yields, in the case of power moments of 
multi-dimensional Kloosterman sums, much simpler recursive formulas than those 
obtained previously in |5]. 



Theorem 1.1. (1) Let n = 2^ g = 2''. For r > 3, and h = 1,2,- ■■ , 
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(1.2) 



mm{(q-l)" \ h} h ^ \n-l 



{q - - t 



3=0 t=j 

Here S{h, t) indicates the Stirling number of the second kind given by 



(1-3) 5(/j,t) = i^(-l) . 

■ j=o ^-^ 

In addition, {C'„_i jj^^g^'' denotes the weight distribution of the binary linear 
code Cn-i, given by 

(1-4) C„_i,, 



V(3 



where the sum runs over all the sets of integers {i^/3}/3gf, (0 < < 5[n — 
satisfying 

(1.5) V(i = j, and i/pf] = 0, and 

5(n-l,g;/3) = |{(ai,---,a„_i)e(F;)"-i| 

ai H h q;„_i + a^"^ • • • a^^^ = 

^ fg-H(9-l)"-^ + l}, *//3 = 0, 

\if„_2(A; r + g-Hl? - 1)"-' + 1}, *//3 G F^. 

Here we understand that Kq{X] f3~^) = X{p^^). 



(2) Let g = 2^ Forr>3, and m, ft. = 1, 2 

Xq~i)-^-t 



1=0 

(1-6) 

+ q ' (-1)''+^ E tlS{h, t)2^-' (^'^ " ^ 

i=o t=j 



i/ere {^m,j}jLo^^ ^'^ weight distribution of the binary linear code Dm, given 
by 

where the sum runs over all the sets of integers {vp\ fj^f^{Q < Vfj < (j{m,q; (3)) 
satisfying il.5\l . and 
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a(m,g;/3) = |{(ai,--- ,a„Oe (F;n 

(1.8) "iH ^"m+^r^-^ ^"rn^=/9}l 

= J2 Ko^l + ••• + «„) + q-'{{q - ir + 
with the sum running over all a^, • ■ ■ , G F*, satisfying a^^ + • • • + = [i. 

(1) and (2) of the following are respectively n — 2 and n = A cases of Theorem 
11.11 (1) (cf. (|3.3p . (|3.4p ). and (3) and (4) are equivalent and n = 2 case of Theorem 

0(2) ((cf. (El, (EH)). 



Corollary 1.2. (1) Lei g = 2''. for r>3, andh^ 1, 2, ■ 



n, 



MK^ = Xl(-l)''+'+^ / M« " if-^MK^ 



(1.9) 

+ g ^ (-l)''+^Ci,,X:^!^(/^,02"-*^'" ' 



3=0 t=j 



q-l-tj' 



where {Cij}j^q is the weight distribution of the binary linear code Ci, with 



(.? = o,-- - ,iVi). 



tr{l3- 

Here the sum is over all the sets of nonnegative integers {i'q} [J{'^p}tr{i3-^)=o ■5'^^" 
isfymg vq + Etr(/3-i)=o ^13 = J and Y.tr{i3-^)=o ^nl^ = 0- 



(2) Let q = 2^ For r > 3, and h ^ 1,2, ■■■ , 

MK^ = Xi(-l)''+'+' f ^) {q - If^^-'^MK; 



3 



' mm{(g-l)-',/i} h 3 



where {C^.j^^'L^^ is the weight distribution of the binary linear code C3, with 



c-«=i:(r n n 



l/n / ^ ^ \VR 

|t|<2V?K(A;/3-l)=t ^ ^ 

t=-l(4) 

Here the sum runs over all the sets of nonnegative integers {vi3\i3ev satisfying 



and 



niQ — - 3q + 3, 
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mt ^ f + q'^ - 4:q + 3, 



for every integer t satisfying \t\ < and t = —1(4) . 
(3) Let q = T . For r > 3, and h = 1,2, ■■■ , 



1=0 

(1.11) 



mm{((j-l) ,h} h /f '\\2 

q {^lf+'D^^,Y.^\S{h,t)2'^ 



^tfiq^iy-J 
(q-ir-t 

J— ^ " — J 

where {D2j}Y^q is the weight distribution of the binary linear code D2, with 



t=-m 

the sum running over all the sets of nonnegative integers {i^^j/seF, satisfying Hl.Sfl . 
(4) Let q = 2''. For r > 3, and h = 1,2, ■■■ , 



h-l 



MK^ = Y,{-lf+''+^ ) {q^ - 3g + l)^^-'HlKi 

1=0 

min{(q—l)^,h} h 



I 

1 = 

(1.13) 



, E ' i-^r'D2,Y.t^.sih,t)2^-^(^^'^_'^^^_i 



j=o t=j 
where D2j{0 < j < {q — 1)^) 's are just as in 

The next two theorems will be of use later. 



Theorem 1.3. (|9j) Let q — 2^ , with r > 2. Then the range R of K{X;a), as a 
varies overW*, is given by 

R = {teZ\ \t\< 2^, t = -l(mod4)}. 

In addition, each value t E R is attained exactly H{t^ — q) times, where Hid) is 
the Kronecker class number of d. 

Theorem 1.4. (^) For the canonical additive character A of¥q, and a G F* 



(1.14) 



K2i\;a)=K{X;af-q. 
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Before we proceed further, we will fix the notations that will be used throughout 
this paper: 

q = 2- (r eZ>o), 
¥q = the finite field with q elements, 

tr{x) = X + + ■ ■ ■ + the trace function Fg —>■ ¥2, 

X{x) = (— the canonical additive character of F^. 

Note that any nontrivial additive character ^ of F^ is given by ^'{x) — X{ax), 
for a unique a G F*. 

2. Construction of codes associated with multi-dimensional 

Kloosterman sums 

We will construct binary linear codes C„_i of length Ni — (q— connected 
with the (n — l)-dimensional Kloosterman sums. Here n = 2", with s G Z>o. 
Let 

(2.1) Vn-i = (• • • , ai H h an-i + ' ' ' a^li, ■■ ■), 

where ai,a2, ■ ■ ■ ,0:^-1 run respectively over all elements of F*. Here we do not 
specify the ordering of the components of w„_i, but we assume that some ordering 
is fixed. 

Proposition 2.1. ("F , Proposition 11) For each /3 G F^, let 

5{n~l,q;P) - \{{a^,--- ,a„_i) G (F;)"- + • • • , +a„_i + • • • = /3}| 

(Note that S{n — l,q;P) is the number of components with those equal to (3 in the 

vector Vn-i ( cf. S2.1\) )). 

Then 

^(n-l,g;0)-g-i{(g-l)"-i + l}, 

and, for /? G F*, 

5{n - 1, q; /?) = if„_2(A; r') + - 1)""' + 1}, 

where Kq{X;(3^^) — X{f3^^) by convention. 

Corollary 2.2. (1) 

[2, */tr(/3-i)=0, 

(2.2) d{l,q;(3)= h, iff3^0, 

[0, iftr{(3-^)^l. 

(2) 

^ ' ^''''^ W(A;r^)2 + g2-4g + 3, ^f P e ¥; (cf.^). 
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The binary linear code Cn-i is defined as 

(2.4) Cn-l ^{ue 1 \U ■ Vn-l = 0}, 

where the dot denotes the usual inner product in F^^. 
The following Delsarte's theorem is well-known. 

Theorem 2.3. ([T2]) 

Let B be a linear code over F^. Then 

{B\^,)^=tr{B^). 

In view of this theorem, the dual C,^_]^ of C„_i is given by 

(2.5) Cti = {c{a) -(•••, tr(a(a, + • • • + a,,_, + a^^ ■ ■ ■ a^^)), • • • )|a G FJ. 

Lemma 2.4. [q - 1)"-^ > nq^ , for all n = 2" (s e Z>o), and q = 2'' > 8. 
Proof. This can be proved, for example, by induction on s. □ 

Proposition 2.5. For q — 2^, with r > 3, the map F^ C^_i{a c(a)) is an 
¥2-linear isomorphism. 

Proof. The map is clearly F2-linear and onto. Let a be in the kernel of the map. 
Then tr{a{ai + • • • + a„_i +ai^ ■ ■ ■ a"!^)) = 0; ^^r all ck]^, • • • , q;„_]^ G F*. Suppose 
that a ^ 0. Then, on the one hand, 

(2.6) (_i)*'-(«(«i+-+«.-i+«r'-«;:-i)) ^ _ ^ jVi. 

On the other hand, (|2.6p is equal to ii'„_i(A; a) (cf. proof of Proposition 11 in j5]), 
and so from Deligne's estimate in p.ip we get 

(q- l)"-i < ng"^. 

But this is impossible for g > 8, in view of Lemma [^T^ □ 

3. Recursive formulas for power moments of multi-dimensional 

Kloostermann sums 

We are now ready to derive, via Pless power moment identity, a recursive formula 
for the power moments of multi-dimensional Kloosterman sums in terms of the 
frequencies of weights in C„_i. 
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Theorem 3.1. [Pless power moment identity, [12j ) Let B he an q-ary [n,k] code, 
and let Bi(resp. ) denote the number of codewords of weight i in B(resp. in 
B^). Then, for h = 0,1,2, ■■■ , 



min{n,h} h 



n ~ t J ^ 



(3.1) E hiyB^J2t'-sih,t)q'^-\q-ir^ 

i=0 i=0 t=i 

where S{h, t) is the Stirling number of the second kind defined in U.3\) 
For the following lemma, observe that (n, q — 1) = 1. 



Lemma 3.2. The map a i-^ a" : F* ^ F* is a bijection. 



Lemma 3.3. For a G F*, the Hamming weight w{c{a))(cf. i2.5]) ) of c{a) can be 
expressed as follows: 

(3.2) w{c{a)) = ^ - ii^„-i(A;a), with = (9 - 1)""^ 

Proof. 

w{c{a)) = - ^ (1 - (-l)*'-(°("i+-+"-.-i+"r'-<-i))) 

-^{^1- E A(a(ai + --- + a„_i+a-i---a-li))} 

Nl 1 ■r-^ T) — 1 — 1 \ 

= ^ - ^ E ^« + • ■ ■ + <-i + • • • «n"i) 



(6?/ Lemma[ 

E ^(K + --- + «n-i + ««r'---<-i)") 

A^i 1 



2 2 E A(ai + ... 

([TUj, Theorem 2.23(v)) 

Ni 1 , ^ 



a„_i+aai • ■ ■ 



□ 



Denote for the moment Vn-i in (|2.H) by Wn-i = {91,92,- ■■ ,9Ni)- Let u = 
(wi, • • • ,Uf^-^) € ^2^, with i/^ I's in the coordinate places where 91 — (3, for each 
/? € F^. Then we see from the definition of the code C„_i (cf. (|2.4p ) that u is 
a codeword with weight j if and only if X]/3eF, ~ j S/3eF, ^/s/' ~ ^ (an 
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identity in ¥q). As there are H/agF, l*^"^],'''''^^) Proposition 12. 1|) many such 
codewords with weight j, we obtain the following result. 

Proposition 3.4. Let {Cn-i,j}f2o weight distribution o/C„_i, where Cn-ij 

denotes the frequency of the codewords with weight j in C„_i. Then 



per, VP/ 



where the sum runs over all the sets of integers {i^/sl/jgF, {0 < i^fi < S{n — 1, q; 
satisfying 

^ = j, and ^ 1^0/3 = 0. 



Corollary 3.5. (1) Let {Cij}j^q be the weight distribution ofCi. Th 

(3.3) ci,, = E f,! ) n (!,) (j-or-- ,q- 1), 



'^"^ tr(/3-i)=0 ^^'^ 



where the sum is over all the sets of nonnegative integers U {v[3}tr(i3-'^)=n sat- 
isfying Vq + Etr(/3-i)=0 = J a"'^ Etr(/3-i)=0 ^/3/^ = ^ (cf-lKW)- 

(2) Let {Ca.jlj^Q^'' 6e f/ie weight distribution ofC^. Then 



p") =!:('? n n '"" 



l/n / \Vr 

|t|<2V9 i^(A;/3-i)=t ^ 

te-l(4) 

where the sum runs over all the sets of integers {I'/sl/SeF, satisfying 

E z/^ = j, and E i^f^P = 0, 

/3eF, /3eF, 



mo = — 3(7 + 3, 



mt = + - 4g + 3, 
/or every integer t satisfying \t\ < 2^ and t = — 1(4) fc/. Theorem \1.3\ S2.3\) ). 

Remark 3.6. This shows that the weight distribution of Ci is the same as that of 
C(50+(2,9)) (cf. H). 

From now on, we will assume that r > 3, and hence every codeword in C^_i can 
be written as c(a), for a unique a € (cf. Proposition 12 . 5p . 
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We now apply the Pless power moment identity in ()3.1|) to C:^_i^ in order to 
obtain the result in Thcorcm ll.il (1) about a recursive formula. Then the left hand 
side of that identity in (|3.ip is equal to 

(3.5) 

with w{c{a)) given by ((3?2l) . So ([33]) is 

E «^(^(«))' = ^ E w - 

aGF* a&l 

(3.6) -iEE(-i)'(')^i"^^"-(^^«)' 

= iE(-i)'(')^i'"^^^<-i- 

On the other hand, noting that dinifr^Cn-i — r (cf. Proposition 12. 5p the right 
hand side of the Pless moment identity(cf. (|3.ip ) becomes 

min{Ni,h} h 

(3.7) q E (-l)^C„-i..E*!^('*'^)2"* 
Our result in (|1.2p follows now by equating (|3.6p and p.7p . 

Remark 3.7. A recursive formula for the power moments of multi-dimensional 
Kloosterman sums was obtained in 5J by constructing binary linear codes C{SL{n, q)) 
and utilizing explicit expressions of Gauss sums for the finite special linear group 
SL{n,q). However, our result in (|1.2p is better than that in (1) of [S]. Be- 
cause our formula here is much simpler than the one there. Indeed, the length 
of the code C„_i here is Ni = {q — 1)"^^, whereas that of C{SL{n,q)) there is 
N — q^'^^ Yij=2il'' ~~ both of which appear in their respective expressions of 
recursive formulas. 




4. Construction of codes associated with powers of 
Kloosterman sums 

We will construct binary linear codes Dm of length N2 — {q — 1)'", connected 
with the TO-th powers of (the ordinary) Kloosterman sums. Here m E Z>o- 
Let 

(4.1) Wrn = (• • • , H 1- "m + ^ 1~ "m^ ' ' ' ): 

where ai,a2,--- , run respectively over all elements of F*. Here we do not 
specify the ordering of the components of Wm, but we assume that some ordering 
is fixed. 
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Theorem 4.1. Let A be the canonical additive character of ¥q, and let /? G F*. 

Then 



(4.2) Yl X{^^) = K{X;I3)-1. 

aGF,-{0,l} 



Proposition 4.2. For each j3 e F^, let 

a{m,q-l3) = \{{a^,--- e (F^n^i + • • • + a„, + a^' + ' ' ' + "m' - /?}! 

(Note that a{m,q;(3) is the number of components with those equal to {3 in the 
vector Wm (cf Then 

(1) 

(4.3) a{m, g; /?) - ^ X{a, + ■■■ + a J + q-'{iq - 1)" + 

where the sum in 14-3^ runs over alla^, - ■ ■ , a„ £ ¥*, satisfying ai^ + - ■ -+0:^^ — /?. 



(2) 

(4.4) a(2,g;/3) 



2q-3, *//3 = 0, 

X(A;/3-i) + <z-3, ifP^O. 



Proof. (1) can be proved iust as Proposition l2.ir cf. 5J, Proposition 11). The details 
are left to the reader. 
(2) If m = 2, from gjl) 



(4.5) a(2,9;/3)=.^A(ai+a2) + g-2, 

where ai and a2 run over all elements in F*, satisfying aj"^ + = f3. 

If /3 = 0, then the result is clear. Assume now that P ^ 0. Then the sum in (|4.5p is 

^ A(«i + («r' + /?)-!) 

QieF,-{0,/3-i} 

QieF,-{0,/3} 

XI ^(^-^ ) (ai-^/3ai) 

QieF,-{o,i} 

= X(A;r')-l (c/.(I121)). 
The binary linear code D„i is defined as 

where the dot denotes the usual inner product in F^^ . 



□ 
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Remark 4.3. Clearly, the binary linear codes Ci and Di coincide. 

In view of Theorem 12. 3i the dual D:^ of Dm is given by 
(4.6) Di = {dia) = (•••, tr(a(ai + • • ■ + a„ + a^' + • • • + 0^')), ■■■)\ae FJ. 

Lemma 4.4. {q - 1)™ > 2™?"?, for all m e Z>o and q = 2'' > 8. 

Proof. This can be shown, for example, by induction on m. □ 



Proposition 4.5. For g = 2*", with r > 3, t/ie map D^ia i— > (i(a)) is an 

¥2-linear isomorphism. 

Proof. The map is clearly F2-linear and onto. Let a be in the kernel of the map. 
Then tr{a{ai + ■ ■ • + + + ■ ■ • + ttm^)) = 0, for all ai, • • • , am G F*. Suppose 
that a 7^ 0. Then, on the one hand, 



(4.7) ^ '+•••+",„')) = (g - 1)™ = Ar2- 

On the other hand, (|4.7|) is equal to i^r(A;a)'", and so from Weil's estimate (i.e. 
(|l.ip with m = 1) we get 

(g- 1)" < 2"g^. 

But this is impossible for q > 8, in view of Lemma □ 



5. Recursive formulas for to-multiple power moments of 
Kloostermann sums 

We are now ready to derive, via Pless power moment identity, a recursive formula 
for the TO-multiple power moments of Kloosterman sums in terms of the frequencies 
of weights in Dm • 

Lemma 5.1. For a G F*, the Hamming weight w{d(a)) of d{a) (cf. can he 

expressed as follows: 

(5.1) w{d{a)) = ^ - ^^(A; a)™, with ^ [q - 1)™. 

Proof. This can be shown exactly as the proof of Lemma 13.31 □ 



Corollary 5.2. For m = 2, 

(5.2) w{d{a)) = i(g2 - 3q + 1 - K^iX; a)) (c/.^). 

The same argument leading to Proposition 13.41 shows the next proposition. 



m-MULTIPLE POWER MOMENTS OF KLOOSTERMAN SUMS 



13 



Proposition 5.3. Let {Dm,j}j'^Q be the weight distribution of Dm, where Dr, 
denotes the frequency of the codewords with weight j in D„i. Then 

where the sum runs over all the sets of integers {j^/3}/3eF, (0 < 1^/3 < a(rn,q; P)), 
satisfying 

^ = j, and ^ = 0. 

Corollary 5.4. Let {L)2,j}jLQ be the weight distribution of D2, and let q = 2^ , 
with r > 2. Then, in view of Theorem \1.3\ and |^.^[), we have 



^0 y - V ^0 



^ |t|<2yq if(A;;3-l)=t ^ 
tES-l(4) 

where the sum runs over all the sets of nonnegative integers {i^p}peWg satisfying 

^ z/;3 = j, and ^ = 0. 

From now on, we will assume that r > 3, and hence every codeword in D^-^ can 
be written as d{a), for a unique a G ¥q(cf. Proposition \4.5^ . 

We now apply the Pless power moment identity in (|3.ip to -D,^, in order to obtain 
the result in Theorem ll.il fl) about a recursive formula. Then the left hand side of 
that identity in (|3.ip is equal to 

(5.5) 

with w{d{a)) given by (|5.ip . So (|5.5p is seen to be equal to 

(5.6) ^(^(«))' = ^E(-l)'(^)<-'Mif'"'- 

On the other hand, noting that dimw^Dm = ^(cf. Proposition 14. 5p the right 
hand side of the Pless moment identity(cf. (13. ip ) becomes 

mm{N2,h} h / AT ' 

(5.7) q Y {~^yDm,,Y^\S{h,t)2-*l 



j=o t=j 
Our result in (|1.6p follows now by equating (|5.6p and (|5.7j 
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Remark 5.5. If m = 2, from the alternative expression of w{d{a)) in (|5.2p we see 
that (|5.5p can also be given as 
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